StackRadar

CVE-2025-27789

Medium

Advisory

Published 11 Mar 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.006
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
248
of 17,781 indexed, latest versions
Container images
252
deployed by those charts
Fix available
4 of 5
affected packages

Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups

Carried by container images the latest versions of 248 of 17,781 indexed charts deploy, on 252 images.

Affected packageAffected versionsFixed inImages
@babel/runtimenpm7.0.0, 7.0.0-beta.42, 7.4.5, 7.5.0+61 more7.26.10205
@babel/helpersnpm7.4.3, 7.5.5, 7.6.2, 7.7.4+48 more7.26.10141
@babel/runtime-corejs3npm7.12.5, 7.13.6, 7.14.0, 7.14.6+13 more7.26.1024
@babel/runtime-corejs2npm7.5.5, 7.11.2, 7.14.6, 7.20.13+1 more7.26.105
node-babel7deb7.20.15+ds1+~cs214.269.168-6build1no fix listed1
OSV records
GHSA-968p-4wvh-cqc8UBUNTU-CVE-2025-27789

Charts affected

248 by stars
ChartLatestAffected imagesRadar Score
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
@babel/helpers@7.14.6
@babel/runtime@7.14.6
@babel/runtime-corejs3@7.14.6
7.26.10
7.26.10
7.26.10

Open the chart page →

3,744
blobscanethereum-helm-chartsVerified publisher0.1.11 of 1See more

blobscan ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ethpandaops/blobscan:latest7a9ab6370657
@babel/runtime@7.19.4
7.26.10

Open the chart page →

1,329
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
@babel/runtime@7.14.8
7.26.10

Open the chart page →

3,260
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
@babel/helpers@7.17.2
7.26.10

Open the chart page →

3,320
evobotevobotVerified publisher0.1.11 of 1See more

evobot evobot 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
@babel/runtime@7.22.15
7.26.10

Open the chart page →

2,987
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
@babel/runtime@7.15.4
7.26.10

Open the chart page →

4,777
iotagent-jsonfiware0.1.21 of 1See more

iotagent-json fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
fiware/iotagent-json:3.1.0879b21a0d36d
@babel/runtime@7.23.7
7.26.10

Open the chart page →

937
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
@babel/runtime@7.21.0
7.26.10

Open the chart page →

3,159
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
@babel/runtime@7.4.5
7.26.10

Open the chart page →

4,650
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
@babel/helpers@7.10.1
@babel/runtime@7.10.2
7.26.10
7.26.10

Open the chart page →

5,941
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
@babel/helpers@7.10.4
@babel/runtime@7.12.5
7.26.10
7.26.10

Open the chart page →

4,043
node-redgeek-cookbookVerified publisher10.3.21 of 1See more

node-red geek-cookbook 10.3.2

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
nodered/node-red:2.2.2e131dcadfe92
@babel/runtime@7.17.2
7.26.10

Open the chart page →

2,102
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
@babel/runtime@7.21.0
7.26.10

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
@babel/runtime@7.23.2
7.26.10

Open the chart page →

9,019
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
@babel/runtime@7.25.6
7.26.10

Open the chart page →

2,973
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
@babel/helpers@7.15.4
@babel/runtime@7.12.13
7.26.10
7.26.10

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
governify/assets-manager:v1.4.12987672448c7
@babel/helpers@7.15.4
@babel/runtime@7.12.13
7.26.10
7.26.10

Open the chart page →

24,319
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
@babel/runtime@7.22.5
7.26.10
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
@babel/runtime@7.22.5
7.26.10

Open the chart page →

49,025
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
@babel/helpers@7.19.4
@babel/runtime@7.19.4
@babel/runtime-corejs3@7.19.4
7.26.10
7.26.10
7.26.10

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
@babel/helpers@7.19.4
@babel/runtime@7.19.4
@babel/runtime-corejs3@7.19.4
7.26.10
7.26.10
7.26.10

Open the chart page →

2,682
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
@babel/runtime@7.10.2
7.26.10
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
@babel/runtime@7.10.2
7.26.10
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
@babel/runtime@7.11.2
7.26.10
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
@babel/runtime@7.10.2
7.26.10

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
@babel/runtime@7.11.2
7.26.10

Open the chart page →

8,213
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
@babel/runtime@7.24.5
7.26.10

Open the chart page →

3,451
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
@babel/runtime-corejs2@7.23.7
7.26.10

Open the chart page →

7,633
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
@babel/runtime@7.26.0
7.26.10

Open the chart page →

5,769
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
@babel/helpers@7.24.7
7.26.10

Open the chart page →

18,813
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
@babel/runtime@7.21.0
7.26.10

Open the chart page →

6,012
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
@babel/helpers@7.18.2
@babel/runtime@7.18.3
@babel/runtime-corejs3@7.18.3
7.26.10
7.26.10
7.26.10

Open the chart page →

25,017
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
@babel/helpers@7.15.4
@babel/runtime@7.15.4
7.26.10
7.26.10

Open the chart page →

4,253
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
@babel/runtime@7.25.7
7.26.10

Open the chart page →

3,614
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
@babel/runtime@7.5.5
7.26.10

Open the chart page →

32,915
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
@babel/helpers@7.25.0
@babel/runtime@7.25.4
7.26.10
7.26.10

Open the chart page →

11,812
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
@babel/helpers@7.15.3
@babel/runtime@7.20.13
7.26.10
7.26.10

Open the chart page →

4,944
interbtc-hydrainterlay0.1.152 of 4See more

interbtc-hydra interlay 0.1.15

2 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
@babel/runtime@7.15.4
7.26.10
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
@babel/runtime@7.18.0
7.26.10

Open the chart page →

6,831
interlay-firesquidinterlay0.1.111 of 4See more

interlay-firesquid interlay 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
@babel/runtime@7.19.0
7.26.10

Open the chart page →

4,667
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
@babel/runtime@7.14.6
@babel/runtime-corejs3@7.14.0
7.26.10
7.26.10

Open the chart page →

7,232
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
@babel/helpers@7.17.7
7.26.10

Open the chart page →

2,363
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
@babel/runtime@7.15.4
7.26.10

Open the chart page →

6,454
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
@babel/helpers@7.18.2
7.26.10

Open the chart page →

2,315
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
@babel/helpers@7.23.2
@babel/runtime@7.23.9
7.26.10
7.26.10

Open the chart page →

22,589
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
@babel/helpers@7.18.2
7.26.10

Open the chart page →

2,231
shinsei-managerjtektVerified publisher0.2.03 of 8See more

shinsei-manager jtekt 0.2.0

3 of the 8 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
@babel/helpers@7.21.0
7.26.10
moreillon/user-manager:v5.0.2e1c9bfab5c16
@babel/helpers@7.20.7
7.26.10
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
@babel/helpers@7.23.2
7.26.10

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
@babel/helpers@7.23.2
7.26.10

Open the chart page →

16,600
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
@babel/helpers@7.15.4
7.26.10

Open the chart page →

1,579
actual-budgetk8s-chartsVerified publisher0.2.31 of 1See more

actual-budget k8s-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
actualbudget/actual-server:25.3.158fecd9088b7
@babel/runtime@7.25.6
7.26.10

Open the chart page →

2,611
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
@babel/helpers@7.22.15
7.26.10

Open the chart page →

9,098
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.11.0d0cd3d868aca
@babel/helpers@7.14.6
7.26.10

Open the chart page →

5,604
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
@babel/runtime@7.13.10
7.26.10

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
@babel/runtime@7.17.2
7.26.10

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2025-27789.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
@babel/runtime@7.16.7
7.26.10

Open the chart page →

5,410

Container images carrying it

252 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/wekan/wekan:v5.65cb17600883a3
@babel/helpers@7.15.4
@babel/runtime@7.13.10
7.26.10
7.26.10
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
@babel/runtime@7.0.0-beta.42
7.26.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.